APPARATUS FOR PROTECTING CODE ROM DATA IN CODE ROM TEST 



Field of the Invention 



5 The present invention relates to a method and apparatus 

of a code read only memory (ROM) data; and, more particularly,^ 
to a method and apparatus for protecting code ROM data in 
order that the data are easily read and plagiarized in a field 
in case of testing a code ROM built in a microcontrol unit 
10 (MCU) . 

Description of Related Art 

With development of a semiconductor technology, a number 
15 of devices integrated in a unit area are increased, and due to 
the increase of integration, a plurality of code read only 
memories (ROMs) are built in a microcontroller. 

Also, a size of a code ROM is getting larger and larger 
because systems are complicated and a program size becomes 
20 larger. 

Meanwhile, when code ROM data are dumped out for a 
special aim, such as a test of the code ROM built in the 
microcontroller, the code ROM data has a possibility of efflux 
to an outside and being plagiarized by others. 

25 
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Summary of the Invention 



It is, therefore, an object of the present invention to 
provide a method and an apparatus for protesting code ROM data 
5 of a microcontroller from being plagiarized by a third person, 
who does not know a password of the data, and even though the 
data is leaked out to an outside. 

In accordance with an aspect of the present invention, 
there is provided an apparatus for protecting data outputted 

10 from a code read only memory (ROM), comprising: a first 
encryption means for encrypting data outputted from the code 
ROM; a second encryption means for generating a read enable 
signal through an encryption process; and an output means for 
dumping out the encrypted data outputted from the first 

15 encryption means in response to the read enable signal 
outputted from the second encryption means. 

In accordance with another aspect of the present 
invention, there is provided an apparatus for protecting data 
outputted from a code ROM, comprising: a control state machine 

20 unit for generating a control signal for a ROM test operation 
in response to the test enable signal and the clock signal; a 
MISR unit for inputting, compressing key data in 
synchronization with the clock signal in response to the test 
enable signal; an initializing means for providing an 

25 initialization value to the MISR unit in response to the test 
enable signal and the reset signal; a comparison unit for 
outputting the read enable signal by comparing value outputted 
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from the MISR unit with an expected value; and an output means 
for dumping the code ROM data in response to a read enable 
signal . 

Brief Description of the Drawings 

Other objects and aspects of the invention will become 
apparent from the following description of the embodiments 
with reference to the accompanying drawings, in which: 

Fig. 1 is a block diagram illustrating an apparatus for 
protecting code read only memory (ROM) data in accordance with 
the present inventions- 
Fig. 2 is a schematic diagram illustrating a control 
state machine unit in Fig. 1 in accordance with the present 
invention; and 

Fig. 3 is a circuit diagram showing a realization of a 
multiple input signature analysis register (MISR) unit in Fig. 
1 in accordance with an embodiment of the present invention. 

Detailed Description of the Invention 

Hereinafter, an apparatus for protecting code ROM data in 
a code ROM test according to the present invention will be 
described in detail referring to the accompanying drawings. 

Referring to Fig. 1, a code ROM 100 starts to output data 
in response to an address signal ADDR and a read command 
signal ROMRead. An apparatus for protecting code ROM data in 



accordance with the present invention includes a first 
encryption unit 200 for encrypting the ROM data ROdData 
outputted from the code ROM 100, a second encryption unit 300 
for generating a read enable signal ROMReadEn, and an output 
5 unit 400 for dumping out the encrypted data outputted from the 
first encryption unit 200 into outside in response to the read 
enable signal ROMReadEn outputted from the second encryption 
unit 300. 

The first encryption unit 200 includes a multiple input 

10 signature analysis register (hereinafter, referred to as a 
MISR) , which compresses the data outputted from the code ROM 
100 in synchronization with a clock signal CLK, and a 
transistor 240 to provide an initialization value MisrInitVec2 
to the MISR unit 220 in response to a test enable signal 

15 TestEn and a reset signal Reset. 

The second encryption unit 300 includes a control state 
machine unit 320, which generates an enable signal MisrEn for 
a ROM test in response to the test enable signal TestEn and 
the reset signal Rest, and outputs the enable signal MisrEn in 

20 response to the clock signal CLK. A MISR unit 340 in the 
second encryption unit 300, which is enabled by the test 
enable signal MisrEn, receives key data LD in synchronization 
with to the clock signal CLK. A transistor 360 provides an 
initialization value MisrInitVecl to the MISR unit 340 in 

25 response to the test enable signal TestEn and the reset signal 
Reset, and a comparison unit 380 outputs a read enable signal 
ROMReadEn by comparing a value outputted from the MISR unit 
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340 unit with an expected value MisrEnd. 

The expected value MisrEnd is a value generated in 
another MISR unit, which has the same configuration as the 
MISR unit 340, under the condition of recognizing the 
5 initialization value MisrInitVecl and the key data LD. 

The output unit 400 includes a logic multiplication gate 
receiving the read enable signal ROMReadEn from the comparison 
unit 380 and the compressed and encrypted data outputted from 
the first encryption unit 200. Accordingly, the encrypted ROM 
10 data are outputted in response to the read enable signal 
ROMReadEn from the comparison unit 380. 

The MISR unit 340 is initialized when the test enable 
signal TestEn and the reset signal Reset are enabled to '"1", 
simultaneously. Then, while the enable signal MisrEn 
15 outputted from the control state machine unit 320 is enabled 
to ''1", the MISR unit 340 receives and compresses the key data 
LD in response to the clock signal CLK. 

Successively, the comparison unit 38 0 compares an output 
signal from the MISR unit 340 and the expected value MisrEnd, 
20 and in case where the two values are accorded, the read enable 
signal ROMReadEn is enabled to "1" and the value "1" is 
outputted to the output unit 400. 

The read enable signal ROMReadEn of the enabled value ''1" 
is applied to an input terminal of the logic multiplication 
25 gate in the output unit 400, and then the read enable signal 
ROMReadEn makes the encrypted data outputted from the first 
encryption unit 200 dumped out. That is, a protection 
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function is released due to the read enable signal of the 
value '"1" so that ROM data ROMData are dumped out, as it is. 

If the comparison unit 380 compares the output signal 
from the MISR unit 340 and the expected value MisrEnd, and in 
5 case where the two values are not accorded, the read enable 
signal ROMReadEn is disabled to '"0" and then the output unit 
400 does not output the encrypted data. 

Although the encrypted data is exposed to an outside, a 
plagiarism by a third person can be prevented because the ROM 
10 data are already encrypted by the first encryption unit 200. 

Fig. 2 is an internal structure diagram showing the 
control state machine unit 320 in Fig. 1 in accordance with 
the present invention. 

The control state machine unit 320 is comprised of lots 
15 of internal states, such as SR, SI, SN and SW, so as much as 
internal states of the key data LD are provided. 

When the control state machine unit 320 is initialized in 
response to the reset signal Reset, the initialized control 
state machine unit 320 is transited to a SR state and, when N 
20 numbers of the key data LD are inputted in response to the 
clock signal CLK, the initialized control state machine unit 
320 is transited to SI, S2, . . . SN states, sequentially, so 
finally, it is remained in a SW state. At this time, in the 
SW state, the enable signal MisrEN is disabled to ''0", and in 
25 the other states, the control signal MisrEN is enabled to ''1". 

Fig. 3 is a circuit diagram showing an implement of the 
MISR 340 unit in Fig. 1 in accordance with an embodiment of 
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the present invention, in which a 16~bit MISR circuit is 
exemplarily shown. 

Referring to Fig. 3, the 16-bit MISR unit provides 16 
numbers of MISR unit cells SI to S16, each of which has a 
shift resistor structure, and an exclusive OR gate. 

The exclusive OR gate receives data outputted from each 
of 16^^ MISR cell S16, 5^^ MISR unit cell S5, 3^^ MISR unit cell 
S3 and 2^^ MISR unit cell 32, and performs an exclusive 
logical summation. 

The each of data is outputted in accordance with a 16-bit 
primitive polynomial (h(s) = x'^ + + + + 1) . 

The MISR unit cells SI to S16 are serially connected and 
a first MISR unit cell SI receives an output signal of the 
exclusive OR gate. Also, each of 16 numbers of MISR cell 
corresponds to each term of the 16-bit primitive polynomial. 

The MISR unit cell includes an exclusive OR gate 341, 
which performs an exclusive logic summation by inputting the 
key data LD and established data stored in the MISR unit cell 
of at a previous step. A multiplexor 342 selectively outputs 
an output from the exclusive OR gate 341 and data (Q) stored 
in a cell. 

A flip-flop 343 outputs the output rom the multiplexor 
342 to the MISR unit cell in the next step in response to a 
clock signal MisrCLK. The flip-flop 343 is initialized by an 
initialization value MisrInitVecl . 

Assuming that the key data LD and the initialization 
values (Misrinitvecl) are 16-bit signals, the initialization 



value are "FFFFH (in a hexa decimal)," the encrypted data are 
^'OOOOF (in a hexa decimal)," the control state machine unit 
320 only carries three steps of conditional transition, and a 
control signal MisrEn is always in a high level, data of the 
5 pre-established key data SD are outputted to the multiplexor 
342 when the key data LD are a low level in the each of MISR 
unit cells SI to S16. Also, assuming that the control signal 
MisrEn is always in a high level, an output from the exclusive 
OR gate 341 is an input of the flip-flop 343, so that an 

10 output from the flip-flop 343 is a previous step data (SD) . 

All the output data of the MISR unit cells SI to S16 are 
FFFFH, then the exclusive OR gate 341 outputs a low level, so 
output values of a first state are "0111111111111111". 

Subsequently, among the outputs of the first state, 

15 output values of 2^^, 3^^, 5^^ and 16^^ MISR unit cells S2, S3, 
S5 and S16 are inputted to a first MISR unit cell SI via the 
exclusive OR gate (XOR) , and then the value is shifted to a 
16^*" MISR unit cell S16. 

An output value of the first state is "0111111111111111", 

20 therefore, among the output values of the first state, all the 
output values of 2^^, 3^^, 5*''' and 16^^ MISR unit cell S2, S3, 
S5 and S16 are "1" and an output of an exclusive OR XOR gate 
(XOR) is "0", so output values from a second state are 
"0011111111111111". 

25 In the output values of the second state, among the 2*"^, 

3^^, 5^^ and 16^^ output values, a second output value is "0", 
so an output of an exclusive OR gate is "1" and then, output 
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values from a third state are ^^1001111111111111". Therefore, 
the output values from the third state, 1001111111111111, are 
inputted to a comparison unit. 

There is presented another embodiment of the present 
invention. That is, the first encryption unit 200 can be 
omitted so that the ROM data ROMData from the ROM 100 is 
directly applied to the output unit 400. At this time, since 
ROM data to be dumped out is encrypted by the second 
encryption unit 300, a third person may not read the ROM data 
ROMData . 

The present invention protects a dumping of code ROM data 
built in a microcontroller by a third person, and even though 
the data is dumped into outside, a plagiarism by a third 
person may be prevented. 

Although the preferred embodiments of the invention have 
been disclosed for illustrative purposes, those skilled in the 
art will appreciate that various modifications, additions and 
substitutions are possible, without departing from the scope 
and spirit of the invention as disclosed in the accompanying 
claims . 



